Application Security
CWE-434 Unrestricted File Upload: How It Happens and How to Fix It
Let users upload files without limits and one of them may be a web shell. CWE-434 explained, with vulnerable and fixed PHP examples.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-433 Unparsed Raw Web Content Delivery Explained
Code and config files under the web root with an unhandled extension get served as plain text, credentials included. CWE-433 and how to prevent it.
Oct 18, 20263 min read
Application Security
CWE-432 Dangerous Signal Handler Not Disabled
Signal handlers that share state can interrupt each other and corrupt it. CWE-432 explains why handlers must block other signals while they run.
Oct 18, 20262 min read
Application Security
CWE-431 Missing Handler: Unhandled Failures and Crashes
When no handler exists for an event or exception, the program loses its chance to decide what a failure means. CWE-431 and how to cover it.
Oct 18, 20262 min read
Application Security
CWE-430 Deployment of Wrong Handler: Causes and Fixes
When the wrong component processes a file or request, source code can leak and checks can be skipped. CWE-430 explained.
Oct 18, 20262 min read
Application Security
CWE-43 Multiple Trailing Dot Path Equivalence
Stack several dots on the end of a path and some servers return a directory listing. A practical look at CWE-43 and its fixes.
Oct 18, 20263 min read
Application Security
CWE-428 Unquoted Search Path: The Program Files Trap
An unquoted path with spaces can make Windows run C:\Program.exe instead of your program. CWE-428 explained, with the one line fix.
Oct 18, 20262 min read
Application Security
CWE-427 Uncontrolled Search Path Element: How to Avoid It
A search path that includes a directory attackers can write to, such as the current directory, lets them plant code your program will load. CWE-427 explained.
Oct 18, 20264 min read
Application Security
CWE-426 Untrusted Search Path: Causes, Examples and Fixes
Programs that find executables or libraries through a path an attacker controls can be tricked into running the wrong code. CWE-426 explained.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.